Hacking on Medium
My First Bug Bounties — $100 For Twenty Minutes of Work

I just thought I would share my first success with the whole Bug Bounty thing. To be honest it wasn’t as glorious as a lot of other…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to set up Raspberry [ssh+wi-fi]

https://cdn-images-1.medium.com/max/2600/1*RLmj0rI1BBFcJ3mW5osB9g.jpeg
this article shows you how to properly set up and configure your raspberry pi with WI-FI and SSH service enable.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

goEnumBruteSpray - User Enumeration And Password Bruteforce On Azure, ADFS, OWA, O365 And Gather Emails On Linkedin
http://www.kitploit.com/2021/11/goenumbrutespray-user-enumeration-and.html

___________________________
@hacking_Attack
@Hacking_Video

The recommended module is o365 for user enumeration (https://www.kitploit.com/search/label/User%20Enumeration) and passwords bruteforce (https://www.kitploit.com/search/label/Bruteforce) / spray . Additional information can be retrieved to avoid account lockout, to know that the password is good but expired, MFA enabled,...
LinkedinThis module should be used to retrieve a list of email addresses before validating them through a user enumeration (https://www.kitploit.com/search/label/Enumeration) module. The company will be searched on Linkedin and all people working at these companies will be returned in the specified format.The Linkedin's session cookie li_at is required.

___________________________
@hacking_Attack
@Hacking_Video

SearchEngineThis module should be used to retrieve a list of email addresses before validating them through a user enumeration module. The company name will be searched on Google and Bing with a dork to find people working in the company (site:linkedin.com/in+"%s"). The results title will be parsed to output email addresses in the specified format.

___________________________
@hacking_Attack
@Hacking_Video

AzureUser enumerationThe Azure module is only available to enumerate the users of a tenant. The authentication request will be made on https://autologon.microsoftazuread-sso.com, a detailed response shows if the account does not exist, a MFA is required, if the account is locked, ...

___________________________
@hacking_Attack
@Hacking_Video

ADFSPasswords bruteforce / sprayThe ADFS module is only available to bruteforce or spray a password. The authentication request is sent to https:///adfs/ls/idpinitiatedsignon.aspx?client-request-id=&pullStatus=0. An error message can informs the user if the password is expired

___________________________
@hacking_Attack
@Hacking_Video

O365This module allows to enumerate users (https://www.kitploit.com/search/label/Enumerate%20Users) and bruteforce / spray passwords.User enumerationSeveral modes are available: office, oauth2 and onedrive (not implemented yet). The office mode is recommended as no authentication is made. Oauth2 can retrieve additional information through AADSTS error code (https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes) (MFA enable, locked account, disabled account)

___________________________
@hacking_Attack
@Hacking_Video

Passwords bruteforce / sprayAs for the user enumeration, two modes are available: oauth2 and autodiscover (not implemented yet). The Oauth2 is the recommended mode, it allows to get much information thanks to the AADSTS error code (https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes).

___________________________
@hacking_Attack
@Hacking_Video

OWAThis module allows to enumerate users and bruteforce / spray passwords.User enumerationEnumeration is made with authentication requests. Authentication (https://www.kitploit.com/search/label/Authentication) for a non-existent user will take longer than for a valid user. At first, the average response time for an invalid user will be calculated and then the response time for each authentication request will be compared.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I have a request.

Hi, I’m trying to get into my old yahoo account for one reason: to get on my old MySpace account which has pictures of me and my best friend who is currently dying.

If anyone can help, please let me know.

submitted by /u/sirenmelody
[link] [comments]

hacking: security in practice
What could be behind my ONT?

My ISP provides an optical network interface that's the ingress point of my home network and it's got its own admin panel at some arbitrary address. I was messing around with the network configuration and I accidentally ended up with my desktop plugged into that box instead of the router and I found the admin page trying to troubleshoot.

It's secured with an unknown username and password. I'm curious what that device is actually responsible for. Any ideas?

submitted by /u/JamezBURRITOS
[link] [comments]

hacking: security in practice
Rookie here, encryption software recommendations before uploading to the cloud?

Do any of you use encryption software? Free or otherwise? If so which ones do you use. I've got 1TB cloud storage I want to use it for some Iso's etc, but wanted to see if it would be best to encrypt them before uploading them to the cloud.

submitted by /u/Lifes_punchline
[link] [comments]

hacking: security in practice
Today i saw a web extention in my browser named "new tab" (opens a website called hi.ru when new tab is opened)

I never installed that extension. How did it get into my browser!!?. I believe that was a virus but what are the ways it could get into my browser extention?

submitted by /u/brown_homie
[link] [comments]

Laravel 8.x image upload bypass — Zero Day

In the name of God.
Read more...

Black Hat Ethical Hacking
Offensive Security Tool: Hashcat

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: HashcatPost Views: 31 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/BF2.gif Reading Time: 3 Minutes

Offensive Security Tool: Hashcat GitHub Link HashcatHashcat is the world’s fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. Hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to help enable distributed password cracking.

Brute-forcing has evolved into not just cracking passwords from websites, but also specifically from databases, archived folders/files, backups, hashes and more. This tool is different because of the way it can utilize all your machine’s resources especially if you have a GPU. Depending on the machine used, it will give you an ETA of how fast you can crack, with speeds of testing more than 1000 combinations per second.

It can be used as part of your pentesting, bug bounty especially when you come across a lot of secrets keys that can be analyzed of which encryption is used and crack them accordingly to reveal the hidden content of the encryption. Since it supports almost all known algorithms you can check it out by testing it in a training environment to uncover its true power and speed.
See Also: New Linux malware hides in cron jobs with invalid dates Features* World’s fastest password cracker
* World’s first and only in-kernel rule engine
* Free* Open-Source (MIT License)* Multi-OS (Linux, Windows and macOS)
* Multi-Platform (CPU, GPU, APU, etc., everything that comes with an OpenCL runtime)
* Multi-Hash (Cracking multiple hashes at the same time)
* Multi-Devices (Utilizing multiple devices in same system)
* Multi-Device-Types (Utilizing mixed device types in same system)
* Supports password candidate brain functionality
* Supports distributed cracking networks(using overlay)
* Supports interactivepause / resume
* Supports sessions
* Supports restore
* Supports reading password candidates from file and stdin
* Supports hex-salt and hex-charset
* Supports automatic performancetuning
* Supports automatic keyspace ordering markov-chains
* Built-in benchmarking system
* Integrated thermal watchdog* 350+ Hash-typesimplemented with performance in mind
* … and much moreScreenshothttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/hashcat-1.png
See Also: Obfuscated Payloads can be undetected even if you have real-time protection Algorithms* MD4
* MD5
* SHA1
* SHA2-224
* SHA2-256
* SHA2-384
* SHA2-512
* SHA3-224
* SHA3-256
* SHA3-384
* SHA3-512
* RIPEMD-160
* BLAKE2b-512
* GOST R 34.11-2012 (Streebog) 256-bit, big-endian
* GOST R 34.11-2012 (Streebog) 512-bit, big-endian
* GOST R 34.11-94
* GPG (AES-128/AES-256 (SHA-1($pass)))
* Half MD5
* Keccak-224
* Keccak-256
* Keccak-384
* Keccak-512
* Whirlpool
* SipHash

Click here to see all of the algorithms. Attack-Modes* Straight *
* Combination
* Brute-force
* Hybrid dict + mask
* Hybrid mask + dict
* Association *

* accept Rules Supported OpenCL runtimes* AMD
* Apple
* Intel
* NVidia
* POCL
* ROCm Supported OpenCL device types* GPU
* CPU
* APU InstallationDownload the latest release and unpack it in the desired location. Please remember to use 7z x when unpacking the archive from the command line to ensure full file paths remain intact. Usage/HelpPlease refer to the Hashcat Wiki and the output of –help for usage information and general help. A list of frequently asked questions ma[...]